Brazil tightens crypto surveillance with new exchange rate rules

Brazil has approved new prudential regulations that will require virtual asset service providers to meet capital, risk management, and disclosure standards starting in 2027.
Summary
- Brazil has approved new prudential regulations that require crypto service providers to meet capital, risk management, and disclosure standards starting in 2027.
- Virtual goods firms will enter Brazil’s S4 regulatory sector in mid-2028, while S5 small institutions will no longer be allowed to offer crypto services.
- The new requirements expand Brazil’s ongoing crypto regulatory framework, following a recent review of licensing and foreign exchange regulations.
According to a local media report, the Central Bank of Brazil has approved a new set of prudential requirements for virtual asset service providers (SPSAVs), bringing them closer to the regulatory framework applied to stockbrokers and distributors. The rules were approved on July 1 and will go into effect on Jan. 1, 2027, as part of the country’s ongoing implementation of its cryptoasset legal framework.
When these rules go into effect, companies that provide cryptocurrency and other virtual asset services will be required to maintain minimum cash reserves, establish formal risk management policies, and periodically disclose information about their financial condition and operations. The Central Bank said these measures are aimed at strengthening the financial system and reducing risk to customers and the market.
The report said that firms that provide crypto brokerage, custody, and transfer services will now be classified as Type 3 institutions and the economic groups that lead them. According to the Central Bank, classification follows the principle that activities carrying the same risk should be subject to the same regulatory standards.
Another part of the framework presents a phased change to the banking regulatory system in Brazil. The report said that all virtual goods service providers will be included in Section 4 (S4) by June 30, 2028, regardless of size, giving them more time to comply with the full intellectual property requirements.
At the same time, institutions included under Section 5 (S5), which follows a simplified regulatory framework for small financial institutions, will no longer be allowed to provide services for physical assets because the Central Bank considers those activities incompatible with simplified regulatory standards.
The latest step in Brazil’s crypto oversight
The new requirements add to a series of regulatory measures introduced over the past year. In November 2025, the Central Bank published the first operating rules for virtual asset service providers, establishing standards including governance, anti-money laundering controls, foreign exchange participation, and operational requirements.
Earlier this year, Brazil’s National Financial Council required crypto platforms to follow privacy rules comparable to those imposed on traditional financial institutions, including compliance with Complementary Law 105 regarding bank secrets.
The latest intelligence draft also follows a June law that requires crypto companies seeking approval or license renewal to submit independent audit reports prepared by experts registered with Brazil’s securities regulator.
As previously reported, the study reviews anti-money laundering controls, terrorist financing practices, customer asset classification, internal risk management, and employee compliance programs before licensing decisions are made.
Regulators also strengthened oversight in other areas during 2026. In May, Brazil’s Central Bank banned cross-border foreign exchange providers from using crypto-assets to settle international payments, while still allowing digital assets to be sold and transferred outside the supervised payment system.
Recently, federal prosecutors reminded political parties that cryptocurrency donations remain prohibited in election campaigns because campaign finance laws require donors to be clearly identifiable.



